Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 5 Dec 1997 16:15:38 -0500 (EST)
From:      Brian Mitchell <brian@firehouse.net>
To:        Jim Bryant <jbryant@unix.tfs.net>
Cc:        ircadmin@shellnet.co.uk, freebsd-hackers@FreeBSD.ORG
Subject:   Re: Telnet Root access
Message-ID:  <Pine.BSI.3.95.971205161406.11503A-100000@shell.firehouse.net>
In-Reply-To: <199712052035.OAA00812@unix.tfs.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 5 Dec 1997, Jim Bryant wrote:

> ahem...
> 
> why would one wish to have the root password pass over an insecure
> network in plaintext form???
> 
> man su

This is pretty dumb, as the password is _still_ passing over an insecure
network in plaintext form.

> 
> also, for most practical purposes, you should not even be using
> telnet...  i suggest using ssh/sshd, because no passwords, in fact
> nothing in the entire session, is transmitted in plaintext.

Well, some client information is transmitted in plaintext; it does that to
determine what ssh capabilities the other side has.






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.3.95.971205161406.11503A-100000>